This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
File: G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json)
Hash identifier: zVpFEkRd3/l9Ta6C4HAA+mdipxp+W625VnHhhtYopFc=
Subject key identifier: 4B:0D:17:A3:3F:F3:AF:40:B0:4C:A9:2E:3A:2C:6C:36:5E:BD:74:95
Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
Manifest number: 0111
Signing time: Tue 23 Dec 2025 03:53:14 +0000
Manifest this update: Tue 23 Dec 2025 03:53:13 +0000
Manifest next update: Tue 30 Dec 2025 03:53:13 +0000
Files and hashes: 1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: pNFpVWVYc16IklDO7gnmQK7AMQNtepeI0shZUdp8ZBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Validity
Not Before: Dec 23 03:53:13 2025 GMT
Not After : Dec 30 03:53:13 2025 GMT
Subject: CN=694a1229-f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:a9:f3:48:13:d4:d0:dc:49:ba:67:e1:5e:
9b:d5:5c:8f:82:5b:cc:b8:07:b7:d1:27:85:3e:1e:
17:04:8f:10:48:cc:d1:48:05:0b:1e:46:ef:f5:7e:
b8:d1:71:60:89:d2:43:b8:5e:80:08:8c:7c:ed:1e:
e0:81:f6:73:5b:7b:84:8d:da:51:fe:8f:e5:e3:e2:
7a:9c:55:98:14:af:27:70:ad:7b:2b:9c:4a:3a:1c:
6a:d4:82:01:c9:ca:78:58:e0:72:e3:58:f9:e2:aa:
ab:72:9b:01:cc:d2:16:52:bb:88:f5:6c:62:f9:fc:
5a:57:ee:10:cf:0b:dc:b6:46:65:da:d4:47:8c:0c:
d6:50:70:76:0b:c4:05:db:bb:71:5c:23:25:64:ed:
9c:e8:65:64:f7:1d:d9:92:c6:16:d6:8a:ca:1e:6a:
82:fe:94:64:de:1f:f9:c5:29:3d:28:8f:3c:58:a3:
ff:85:ab:94:61:49:98:e4:68:ce:98:1e:5b:0b:5d:
4d:2f:13:eb:08:e4:f6:4c:06:cb:e1:8e:6e:e4:da:
f2:a1:b7:00:07:4e:66:38:74:8f:b1:fd:78:f2:ec:
b4:12:1d:4d:62:7b:50:9b:95:18:9e:93:a1:a5:2a:
9a:a9:61:0c:c9:e0:3b:64:b9:44:ca:26:ce:57:c8:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:17:A3:3F:F3:AF:40:B0:4C:A9:2E:3A:2C:6C:36:5E:BD:74:95
X509v3 Authority Key Identifier:
keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2c:7f:23:eb:5c:bb:f8:f1:1e:23:ef:e8:21:0a:f0:c7:e7:
ff:de:09:76:30:9e:3a:60:7c:70:bc:ca:ed:c6:b1:b9:71:08:
b5:47:ac:04:6f:1c:fb:e3:f8:f2:60:82:5a:6b:2f:72:4e:5e:
97:8c:0f:b1:de:58:44:ed:68:e4:ad:63:82:41:de:97:77:31:
71:89:24:67:29:da:dc:ae:50:2c:f1:01:b6:be:05:bb:8c:e2:
c0:07:14:ff:27:af:a6:5a:6d:3c:5a:68:96:94:b0:a8:6e:5b:
89:a5:f7:96:99:67:59:a1:88:0a:e9:95:16:55:e9:3d:6a:70:
2d:f9:9e:0b:ce:3d:72:90:a7:2e:bd:ce:19:f5:c7:9d:4c:c0:
1e:61:26:cb:76:93:9b:1d:5f:8b:6f:ac:70:4b:f2:e9:58:7b:
2e:2c:03:d8:c3:eb:89:07:09:ca:da:c1:f3:c1:26:58:48:49:
97:c9:41:2c:8a:21:b2:13:20:b5:da:00:63:d3:9f:bf:d3:8a:
e0:74:cc:d4:2f:cc:75:3f:be:be:dc:9b:19:2e:c7:b5:64:7a:
26:b3:69:56:3a:92:a4:45:e4:e1:5d:da:b3:3a:31:1a:c7:03:
87:38:75:74:99:cf:e8:46:ff:66:9a:b1:55:bc:65:ad:e4:85:
85:0f:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:07 2025 by rpki-client